Overview

overview

4

Static

static

1

218e2009-5...e0.eml

windows10-2004-x64

4

218e2009-5...e0.eml

windows11-ltsc_2024-x64

1

email-html-2.html

windows10-2004-x64

3

email-html-2.html

windows11-ltsc_2024-x64

4

Sharing

Copy URL Twitter E-mail

General

  • Target
    218e2009-53e5-e364-5121-c0f2a0b501e0.eml
  • Size 30KB
  • Sample260709-prcjasbw71
  • SHA256 7b3394a2a2530da959e8ab1df92908264b336b37e3f3fc51dd10e72622ce49f2
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • 218e2009-53e5-e364-5121-c0f2a0b501e0.eml
    .eml 30KB
  • email-html-2.txt
    .html 15KB
  • email-plain-1.txt
    1KB

218e2009-53e5-e364-5121-c0f2a0b501e0.eml

  • SHA256 7b3394a2a2530da959e8ab1df92908264b336b37e3f3fc51dd10e72622ce49f2
  • MD5 SHA1 SHA512 SSDEEP TLSH

Email Headers

Return-Path

[email protected]

Date

Wed, 8 Jul 2026 17:07:53 +0000 (UTC)

Subject

Solicitud de transferencia

Content-Type

multipart/alternative; boundary="----=_Part_1687974_1220667944.1783530473452"

Received

from SA1PR12MB7271.namprd12.prod.outlook.com (2603:10b6:806:2b8::16) by BN9PR12MB5034.namprd12.prod.outlook.com with HTTPS; Wed, 8 Jul 2026 17:08:10 +0000

from PH7P220CA0166.NAMP220.PROD.OUTLOOK.COM (2603:10b6:510:33b::13) by SA1PR12MB7271.namprd12.prod.outlook.com (2603:10b6:806:2b8::16) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.181.9; Wed, 8 Jul 2026 17:08:04 +0000

from SA2PEPF000015CC.namprd03.prod.outlook.com (2603:10b6:510:33b:cafe::50) by PH7P220CA0166.outlook.office365.com (2603:10b6:510:33b::13) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.202.10 via Frontend Transport; Wed, 8 Jul 2026 17:08:03 +0000

from sonic314-13.consmr.mail.bf2.yahoo.com (74.6.132.123) by SA2PEPF000015CC.mail.protection.outlook.com (10.167.241.202) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.181.6 via Frontend Transport; Wed, 8 Jul 2026 17:08:03 +0000

from sonic.gate.mail.ne1.yahoo.com by sonic314.consmr.mail.bf2.yahoo.com with HTTP; Wed, 8 Jul 2026 17:08:02 +0000

Received-Spf

Pass (protection.outlook.com: domain of yahoo.com.ar designates 74.6.132.123 as permitted sender) receiver=protection.outlook.com; client-ip=74.6.132.123; helo=sonic314-13.consmr.mail.bf2.yahoo.com; pr=C

X-Mailer

WebService/1.1.26086 YahooMailAndroidMobile

Message-Id

<[email protected]>

Extracted URLs

  • file https://aka.ms/LearnAboutSenderIdentification

  • file https://mail.onelink.me/107872968?pid=nativeplacement&c=US_Acquisition_YMktg_315_SearchOrgConquer_EmailSignature&af_sub1=Acquisition&af_sub2=US_YMktg&af_sub3=&af_sub4=100002039&af_sub5=C01_Email_Static_&af_ios_store_cpp=0c38e4b0-a27e-40f9-a211-f4e2de32ab91&af_android_url=

  • file https://mail.onelink.me/107872968?pid=nativeplacement&c=US_Acquisition_YMktg_315_SearchOrgConquer_EmailSignature&af_sub1=Acquisition&af_sub2=US_YMktg&af_sub3=&af_sub4=100002039&af_sub5=C01_Email_Static_&af_ios_store_cpp=0c38e4b0-a27e-40f9-a211-f4e2de32ab91&af_android_url=https://play.google.com/store/apps/details?id=com.yahoo.mobile.client.android.mail&listing=search_organize_conquer

  • file https://play.google.com/store/apps/details?id=com.yahoo.mobile.client.android.mail&listing=search_organize_conquer